perl-ExtUtils-MakeMaker vulnerabilities (Red Hat)
15 vulnerabilities.
-
perl-ExtUtils-MakeMakerRed Hat Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra… 9.1 Critical -
perl-ExtUtils-MakeMakerRed Hat IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob 7.3 High -
perl-ExtUtils-MakeMakerRed Hat Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header 7.5 High -
perl-ExtUtils-MakeMakerRed Hat Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory 9.1 Critical -
perl-ExtUtils-MakeMakerRed Hat Perl threads have a working directory race condition where file operations may target unintended paths 5.9 Medium -
perl-ExtUtils-MakeMakerRed Hat Perl: write past buffer end via illegal user-defined unicode property 7.0 High -
perl-ExtUtils-MakeMakerRed Hat The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a... 7.5 High -
perl-ExtUtils-MakeMakerRed Hat The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7... 7.5 High -
perl-ExtUtils-MakeMakerRed Hat Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5,... 7.5 High -
perl-ExtUtils-MakeMakerRed Hat CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P... 5.0 Medium -
perl-ExtUtils-MakeMakerRed Hat Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent... 7.5 High -
perl-ExtUtils-MakeMakerRed Hat Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44... 5.1 Medium -
perl-ExtUtils-MakeMakerRed Hat The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x... 5.0 Medium -
perl-ExtUtils-MakeMakerRed Hat CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm... 4.3 Medium -
perl-ExtUtils-MakeMakerRed Hat The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and... 4.3 Medium